Secuno
ENNL
Book demo

CVE-2026-40058

8.8 HIGH
  1. Published15 Sept 2026

Description

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware for Microsoft Office Files settings. An update is available immediately for versions 7.34 and above, 7.32 LTS, and 7.16 for Windows 7/2008 R2 systems. The Falcon sensor for Mac, Linux, and Legacy Systems are not affected.  This vulnerability could expose an arbitrary file write to protected locations from an unprivileged context, potentially leading to local privilege escalation. The CrowdStrike Laroux Malware Cleanup Tool, based off of the same feature in the CrowdStrike Falcon sensor for Windows, is also affected. An update for this tool is also available immediately.

CVSS 3.1 breakdown

Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-917488.3
Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed…
CVE-2026-917438.3
Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote…
CVE-2026-917128.3
Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed…
CVE-2026-875548.1
Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36…
CVE-2026-874578.1
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed…
CVE-2026-874338.8
Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote…

Frequently asked

Is CVE-2026-40058 being actively exploited?

CVE-2026-40058 is not in the CISA KEV catalog.

How severe is CVE-2026-40058?

CVE-2026-40058 has a CVSS 3.1 base score of 8.8, rated high.

How do I fix CVE-2026-40058?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-40058 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.